6 ms·

Read The Tangled Web. It's an excellent book for developers that covers defensive tactics for securing web resources. The beauty is that it approaches the subje

• lawnchair_larry 9y ago
  Which chapter(s) of The Tangled Web do you feel would benefit a web server administrator? It is a great book, but it is almost entirely focused on attacking browsers. It's not clear to me what changes someone might make to their nginx configuration (for example) in light of the information provided in the book.
  • dsacco 9y ago
    I didn't read that out of The Tangled Web. It did cover attacks, but it was also a solid guide on shoring up defenses for developers. To circle back to your question - nginx is fairly robust out of the box, but The Tangled Web will cover extra configuration steps. For example - how to securely handle and serve files uploaded by users, including file naming conventions. Other best practices for configuring things like TLS and CORS will also be covered, which are in the purview of any developer setting up a web server. My interpretation of the book was that it covered attacks that are executed through the browser (especially via user input) insofar as it's instructive for developers to learn how to avoid them.